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Unit 1: Information Technology Systems 
-marking grid 


General marking guidance 


e All learners must receive the same treatment. Examiners must mark the first 
learner in exactly the same way as they mark the last. 


e Marking grids should be applied positively. Learners must be rewarded for what 
they have shown they can do, rather than be penalised for omissions. 


e Examiners should mark according to the marking grid, not according to their 
perception of where the grade boundaries may lie. 


e All marks on the marking grid should be used appropriately. 


e All the marks on the marking grid are designed to be awarded. Examiners 
should always award full marks if deserved. Examiners should also be prepared 
to award zero marks, if the learner’s response is not rewardable according to 
the marking grid. 


e Where judgement is required, a marking grid will provide the principles by 
which marks will be awarded. 


e When examiners are in doubt regarding the application of the marking grid toa 
learner’s response, a senior examiner should be consulted. 


Specific marking guidance 


The marking grids have been designed to assess learner work holistically. 
Rows in the grids identify the assessment focus/outcome being targeted. When 
using a marking grid, the ‘best fit’ approach should be used. 


e Examiners should first make a holistic judgement on which band 
most closely matches the learner’s response and place it within that 
band. Learners will be placed in the band that best describes their 
answer. 


e The mark awarded within the band will be decided based on the 
quality of the answer, in response to the assessment focus/outcome 
and will be modified according to how securely all bullet points are 
displayed at that band. 


e Marks will be awarded towards the top or bottom of that band, 
depending on how they have evidenced each of the descriptor bullet 
points. 


Question | Answer Mark 
Number 
la Award one mark for identification and one mark for each linked | 4 


expansion point up to a maximum of two marks each. 


The ability to interact/communicate with customers (1) by 
commenting/responding to reviews/feedback (1) which will 
promote sales/build up customer relations/allow Ohman to 
improve his services (1) 


He could create a ‘group’ (for buyers and sellers of memorabilia) 
(1) which could lead to increased sales/contributions of 
memorabilia for his business (1) 


Can (post) comments/share photographs/videos of the products 
/ text giving details of the products (1) which would be 
beneficial for individual items like memorabilia/constantly 
changing ‘one off’ stock/giving provenance/validity to the 
products (1) 


Can target specific demographics / can use hash tags (1) which 
will lead to a higher percentage of completed sales (1) 


Can post positive reviews/suggested improvements about 
Ohman’s business (1) which may encourage potential customers 
to look at his website/buy products (1) 


Social networking sites offer measurability, such as statistics on 
how many times an advert/post has been viewed, shared or 
commented on (1) which will allow the business to monitor 
customer opinion and inform future actions/purchases of new 
stock (1) 


Accept any other appropriate response. 


Question | Answer Mark 
Number 
1b Award one mark for identification and one mark for each 4 


expansion point up to a maximum of two marks each. 


The nature of the business means that stock is constantly 
changing/all items are ‘one off’ (1) uploading new 
photos/information/videos can be time consuming (1) 


Customers may post negative comments/or write comments 
about issues encountered that could be visible to everyone (1) 
this could impact on the business if not dealt with 
quickly/effectively / requires constant monitoring of the pages 


(1) 


Can become costly over time if used on a cost per click basis (1) 
and this may not be reflected in increased sales (1) 


Must be proactive in maintaining page / must ensure it is up to 
date (1) to attract/maintain customer interest/ ensure 
maximising exposure/effectiveness (1) 


Accept any other appropriate response. 


Question 
Number 


Indicative content 


1c 


Answers will be credited according to the learner’s demonstration of 
knowledge and understanding of the material, using the indicative content 
and level descriptors below. The indicative content that follows is not 
prescriptive. Answers may cover some/all of the indicative content but 
learners should be rewarded for other relevant answers. 


Learners should discuss the factors that should be considered before 
making a decision to upgrade the operating system. 


Needs to consider whether the new OS is necessary/worthwhile. 


Is the current system supported? 
Unsupported systems will: 
e no longer receive product support, bug fixes, and patch releases 
e make the system vulnerable to unauthorised access/malicious 
attacks 
e result could be loss of data 
e impact on storage of customer data/DPA infringement. 
Installing a new OS will have implications: 


e cost 
o OS 
0 installation 
o training 


e compatibility with 
o application software 
o communication software 
o security software 
o hardware 
e implementation 


o when 
o who 
e staff training 
o who 
o when 


Oo cost. 


Mark scheme (award up to 6 marks) refer to the guidance on the cover of this 
document for how to apply levels-based mark schemes*. 


Level Mark Descriptor 

Level 0 0 No rewardable material. 

Level 1 1-2 Technical vocabulary is used but it is not used appropriately to 
support arguments, in relation to the issues of the question. 
Issues are identified but chains of reasoning are not made, 
leading to a superficial understanding. 

Does not link arguments to the given scenario. 

Level 2 3-4 Accurate technical vocabulary is used to support arguments 
but not all arguments are relevant to the issues of the 
question. 

There is consideration of relevant issues using logical chains of 
reasoning. 

Considers the various elements of the question and but does 
not always link arguments to the given scenario. 

Level 3 5-6 Fluent and accurate technical vocabulary is used to support 


arguments that are relevant to the issues of the question. 


There is a balanced and wide ranging consideration of relevant 
issues, using coherent and logical chains of reasoning that 
shows a full awareness. 


Carefully considers the various elements of the question and 
links arguments to the given scenario. 


Question 
Number 


Indicative content 


1d 


Answers will be credited according to the learner’s demonstration of 
knowledge and understanding of the material, using the indicative content 
and level descriptors below. The indicative content that follows is not 
prescriptive. Answers may cover some/all of the indicative content but 
learners should be rewarded for other relevant answers. 


Learners should explain how Ohman can ensure he fulfils his obligations 
with respect to the display screen equipment element of the Health and 
Safety (Display Screen Equipment) Regulations 1992. 


Ohman must: 

e analyse workstations to assess and reduce risks 

e make sure controls are in place 

e provide information and training 

e provide eye and eyesight tests on request, and special spectacles if 
needed 

e review the assessment when the user or DSE changes. For those 
who employ many users of DSE, this guidance 

Collaboration with staff will help manage the potential problems by : 

e helping spot the risks 

e making sure health and safety controls are practical 

e increasing the level of commitment to working in a healthy way. 

Staff should be trained to follow these steps: 

e make sure individual characters on the screen are sharp, in focus and 
don't flicker or move. If they do, the DSE may need servicing or 
adjustment 

e adjust the brightness and contrast controls on the screen to suit 
lighting conditions in the room 

e make sure the screen surface is clean 

e when setting up software, choose text that is large enough to read 
easily on screen when sitting in a normal comfortable working position 

e select colours that are easy on the eye (avoid red text on a blue 
background, or vice versa). 

Ohman must: 

e provide an eye test if a member of staff requests one 

e pay for a basic pair of frames and lenses if the test shows that the user 
needs glasses specifically for DSE work 

e provide further tests if DSE work is considered to cause visual fatigue 
and at regular intervals after the first test. 


Mark scheme (award up to 6 marks) refer to the guidance on the cover of this 
document for how to apply levels-based mark schemes*. 


Level 


Mark 


Descriptor 


Level 0 


0 


No rewardable material. 


Level 1 


1-2 


Technical vocabulary is used but it is not used appropriately to 
support arguments, in relation to the issues of the question. 


Issues are identified but chains of reasoning are not made, 
leading to a superficial understanding. 


Does not link arguments to the given scenario. 


Level 2 


3-4 


Accurate technical vocabulary is used to support arguments 
but not all arguments are relevant to the issues of the 
question. 


There is consideration of relevant issues using logical chains of 
reasoning. 


Considers the various elements of the question and but does 
not always link arguments to the given scenario. 


Level 3 


5-6 


Fluent and accurate technical vocabulary is used to support 
arguments that are relevant to the issues of the question. 


There is a balanced and wide ranging consideration of relevant 
issues, using coherent and logical chains of reasoning that 
shows a full awareness. 


Carefully considers the various elements of the question and 
links arguments to the given scenario. 


Question 
Number 


Answer 


Mark 


2a 


Award one mark for identification and one mark for each 4 


expansion point up to a maximum of two marks each. 


Biometric is unique (1) can’t be copied/passed on to other 
people/ID cards that can be passed on to other users/stolen (1) 


Biometric is part of the person’s physical presence (1) no need 
to carry an ID card/ID cards can be lost/damaged (1) 


Question | Indicative content 
Number 
2b Answers will be credited according to the learner’s demonstration of 


knowledge and understanding of the material, using the indicative content 
and level descriptors below. The indicative content that follows is not 
prescriptive. Answers may cover some/all of the indicative content but 
learners should be rewarded for other relevant answers. 


Learners discuss how user accounts impact on different user groups of the 
system. 


User groups created - Students, Teaching Staff, Administrative Staff, IT 
Technicians. All members of the group automatically get the same access 
rights. 


All users have a profile that shows what access rights the user has on the 
system, i.e. what they can/cannot access on the network 


Access rights include access to and limitations on what can be done in the 
following areas : 


e files/folders 

e applications/software 

e hardware access 

e network administration. 
All users will be able to log on to a workstation/PC and perform general 
user tasks. 


File access rights 


All users will be able to: 

e access own files edit/delete them 

e access specified files in a shared area, copy to own user area. 
Students will not be able to: 

e access any other users’ files 

e delete/edit files in the shared area. 
Teachers will be able to: 

e add files to the shared area 

e delete/edit files in the shared area 

e access/edit/create administrative files relating to students’ 
progress. 

Admin staff will be able to: 

e access/edit files relating to their particular role, e.g. pupil admin, 
finance and HR, but will not be able to access admin files outside 
their remit. 

IT Technicians will be able to access files required for network 
administration but are unlikely to be able to access admin files, e.g. pupil 
admin, finance and HR. 


Application/Software access rights 


Access to applications and software will be limited to what is deemed 
necessary to carry out the user’s role. 


Hardware 


Access to certain printers/scanners, etc. may be restricted for all users 
often depending geographical location, but may be to do with types, e.g. 
colour printers, lasers, ink jet. 


Logging on to a PC may be limited for students, e.g. may not be able to 
log on to a ‘teacher’ PC. 


Network administration 


Generally restricted to IT Technicians, although some teachers may be 
able to carry out simple tasks such as changing passwords. 


IT Technicians do most administration tasks on the system: 


install new software, 

change system settings 

add/delete users 

setting quotas, e.g. printing, user space 

access everyone's files and folders 

restricting internet access/restricting to particular websites. 


Mark scheme (award up to 8 marks) refer to the guidance on the cover of this 
document for how to apply levels-based mark schemes*. 


Level Mark Descriptor 

Level 0 0 No rewardable material. 

Level 1 1-2 Technical vocabulary is used but it is not used appropriately to 
support arguments, in relation to the issues of the question. 
Issues are identified but chains of reasoning are not made, 
leading to a superficial understanding. 

Does not link arguments to the given scenario. 

Level 2 3-5 Accurate technical vocabulary is used to support arguments 
but not all arguments are relevant to the issues of the 
question. 

There is consideration of relevant issues using logical chains of 
reasoning. 

Considers the various elements of the question and but does 
not always link arguments to the given scenario. 

Level 3 6-8 Fluent and accurate technical vocabulary is used to support 


arguments that are relevant to the issues of the question. 


issues, using coherent and logical chains of reasoning that 
shows a full awareness. 


Carefully considers the various elements of the question and 
links arguments to the given scenario. 


There is a balanced and wide ranging consideration of relevant 


Question Indicative content 
number 


2c Answers will be credited according to the learner’s demonstration 
of knowledge and understanding of the material, using the 
indicative content and levels descriptors below. The indicative 
content that follows is not prescriptive. Answers may cover 
some/all of the indicative content but learners should be rewarded 
for other relevant answers. 


A diagram of a potential system/integration of IT systems and 
connections used to meet the requirements of the scenario. 


Diagram may include: 


devices: 

e laptops (teachers and/or student) 

e personal computer (teachers and/or student) 

e peripheral devices, e.g. mouse, keyboard, graphics tablet 
e smartphone 

e digital camera 

e router 

e modem 

e switches 


storage/data sharing: 


e network server 
e USB/SD card 
e external hard drive 


connections: 


e personal computer connected to server using Ethernet 
laptop (teacher) connected to server using WiFi 

mouse connected to desktop/laptop using USB/Bluetooth 
smartphone connected to laptop using USB/WiFi/Bluetooth 
USB/eSATA to connect to portable hard drive 

e home broadband connection for VPN 

e (home) WiFi connection for laptop 


data flow: 


The diagram should show descriptions of the data flow between 
components and show the direction in which data is exchanged. 


Mark scheme (award up to 10 marks) refer to the guidance on the 
cover of this document for how to apply levels-based mark schemes*. 


Level Mark Descriptor 


Level 0 0 


No rewardable material. 


Level 1 


1-3 


Diagram provides partial coverage of appropriate 
devices. Storage/Data sharing and connection 
types are used to meet some of the requirements 
of the scenario, with limited efficiency. 


Annotations of the data that will be shared between the 
components of the system are incomplete or contain 
inaccuracies. 


Level 2 


Level 3 


Diagram provides coverage of mostly appropriate 
devices. Storage/data sharing and connection 
types are used to meet the majority of the 
requirements of the scenario, but these may not 
always be the most efficient. 


Diagram includes mostly accurate annotations of 
the data that will be shared among the 
components of the system 


Diagram provides thorough coverage of appropriate 
device. Storage/data sharing and connection types 
are used to fully meet the requirements of the 
scenario. 


Diagram includes detailed and accurate 
annotations of the data that will be shared among 
the components of the system. 


Question | Indicative content 
Number 
3a Answers will be credited according to the learner’s demonstration of 


knowledge and understanding of the material, using the indicative content 
and level descriptors below. The indicative content that follows is not 
prescriptive. Answers may cover some/all of the indicative content but 
learners should be rewarded for other relevant answers. 


Learners discuss the advantages and disadvantages of collecting the 
information online rather than face to face in this instance. 


Advantages 
e Most young adults are IT literate 


e Young people enjoy using technology and may be more willing to take 
part 


e Participants may feel more comfortable and willing to offer opinions/ 
ideas online 


e Participants more likely to concentrate on the questions, not be 
distracted 


e Questions can be structured 


e Questions are more focused than a face- to-face discussion, which can 
go ‘off topic’ 


e Participants do not need to travel to the centre 

e No need to organise a physical meeting room 

e May be able to provide tools to automatically collate the results 
e May be able to provide tool to analyse the results 


e Collating feedback from multiple participants can be automated 


Disadvantages 
e Not all young people have the technology/internet connection 
e May create a stigma for those without the required technology 


e The results could be skewed as those without the technology may be 
from poorer families/who may not be able to afford to take advantage 
of the new facilities 


e Those without the technology may be the ones who would gain most 
from additional services at the centre 


e Need an effective system for recording/summarising the main points 
of the discussion 


e The style of questions needs to be considered so responses are not 
restricted/limited 


Mark scheme (award up to 6 marks) refer to the guidance on the cover of this 
document for how to apply levels-based mark schemes*. 


Level 


Mark 


Descriptor 


Level 0 


0) 


No rewardable material. 


Level 1 


1-2 


Technical vocabulary is used but it is not used appropriately to 
support arguments, in relation to the issues of the question. 


Issues are identified but chains of reasoning are not made, 
leading to a superficial understanding. 


Does not link arguments to the given scenario. 


Level 2 


3-4 


Accurate technical vocabulary is used to support arguments 
but not all arguments are relevant to the issues of the 
question. 


There is consideration of relevant issues using logical chains of 
reasoning. 


Considers the various elements of the question and but does 
not always link arguments to the given scenario. 


Level 3 


5-6 


Fluent and accurate technical vocabulary is used to support 
arguments that are relevant to the issues of the question. 


There is a balanced and wide ranging consideration of relevant 
issues, using coherent and logical chains of reasoning that 
shows a full awareness. 


Carefully considers the various elements of the question and 
links arguments to the given scenario. 


Question | Answer Mark 
Number 
3bi Award one mark for identification and one mark for each 6 


expansion point up to a maximum of two marks each. 


Where there are three answers the second mark may be used as 
either an identification or an expansion point. 


Validation (1) Use (drop down) list for gender/title (1) to restrict 
field choice (to pre-set values) (1) 


Validation (1) Use format check / input masks for postcode/date 
of birth/telephone number) (1) to ensure correct formatting of 
fields/correct data type for each ‘element’ (1) 


Validation (1) Set length check for telephone number (1) 


Validation(1) Presence checks/ to check the data has been 
entered (1) 


Verification (1) Check that a postcode actually exists (1) 
Data type for complete telephone number (1) Must be text (1) 


Calendar for date of birth (1) to restrict field choice to accurate 
dates (1) 


Do not allow ‘list’ without expansion. 
Only award ‘validation’ once. 


Question | Indicative content 
Number 
3bii Answers will be credited according to the learner’s demonstration of 


knowledge and understanding of the material, using the indicative content 
and level descriptors below. The indicative content that follows is not 
prescriptive. Answers may cover some/all of the indicative content but 
learners should be rewarded for other relevant answers. 


Learners explain the factors that Joseph should consider when setting up 
the user interface for the online survey. 


e Ease of use/intuitiveness 
o Obvious places for users to enter data 
o Have logical flow through the questions to help users navigate 
o Appropriate controls, e.g. buttons/radio buttons/tick boxes/ 
drop down menus 
o Pop-up instructions to help users 
o Consistency layout/navigation/fonts/colours 


e Accessibility 
o Provide text alternatives for non-text content 
Allow ‘zoom’ facility 
Make it available to assistive technologies 
Allow screen reader 
Use sufficient contrast to make things easy to see 
o Make text readable/understandable/concise/simple 
e Functionality 
o Is all the functionality keyboard accessible? 
o Consider other ways of accessing, e.g. touch screen 
o Provide ways of ‘undoing’ incorrect responses 


e Performance 
o No lag between submission and next question 


e Compatibility 
o Consider different platforms, e.g. tablets/PC 
o Consider different operating systems, e.g. windows/IOS 


Mark scheme (award up to 6 marks) refer to the guidance on the cover of this 
document for how to apply levels-based mark schemes*. 


Level Mark Descriptor 

Level 0 0 No rewardable material. 

Level 1 1-2 Technical vocabulary is used but it is not used appropriately to 
support arguments, in relation to the issues of the question. 
Factors are identified but chains of reasoning are not made, 
leading to a superficial understanding. 

Does not link arguments to the given scenario. 

Level 2 3-4 Accurate technical vocabulary is used to support arguments 
but not all arguments are relevant to the issues of the 
question. 

There is consideration of relevant factors using logical chains 
of reasoning. 

Considers the various elements of the question and but does 
not always link arguments to the given scenario. 

Level 3 5-6 Fluent and accurate technical vocabulary is used to support 


arguments that are relevant to the issues of the question. 


There is a balanced and wide ranging consideration of relevant 
factors, using coherent and logical chains of reasoning that 
shows a full awareness. 


Carefully considers the various elements of the question and 
links arguments to the given scenario. 


Question | Indicative content 
Number 
3c Answers will be credited according to the learner’s demonstration of 


knowledge and understanding of the material, using the indicative content 
and level descriptors below. The indicative content that follows is not 
prescriptive. Answers may cover some/all of the indicative content but 
learners should be rewarded for other relevant answers. 


Learners discuss the factors that need to be considered when designing 
the new class booking system in Springtop Leisure Complex. 


User experience 
e Ease of use 
e Performance 
e Availability 
e Accessibility 
Specifications/Compatibility 
e Compatibility with current membership database 
e Compatibility with tablet/mobile devices/apps 
e Compatibility with different web browsers 
Connectivity 
e Server on site 
e Remote server/cloud 
e Bandwidth available 


e Development cost 

e Hardware costs 

e Ongoing/Running costs 

e Training costs 
Efficiency/Productivity 

e System availability 

e Staff productivity 
Implementation 

e Timescales 


e Testing 
e Migration to new systems 
Security 


e Data protection 
e Encryption of data when booking via online service 


Other 
e Customer experience in the sports centre as not having to wait to 


book in to classes 


Mark scheme (award up to 8 marks) refer to the guidance on the cover of this 
document for how to apply levels-based mark schemes*. 


Level 


Mark 


Descriptor 


Level 0 


0 


No rewardable material. 


Level 1 


1-2 


Technical vocabulary is used but it is not used appropriately to 
support arguments, in relation to the issues of the question. 


Issues are identified but chains of reasoning are not made, 
leading to a superficial understanding. 


Does not link arguments to the given scenario. 


Level 2 


3-5 


Accurate technical vocabulary is used to support arguments 
but not all arguments are relevant to the issues of the 
question. 


There is consideration of relevant issues using logical chains of 
reasoning. 


Considers the various elements of the question and but does 
not always link arguments to the given scenario. 


Level 3 


6-8 


Fluent and accurate technical vocabulary is used to support 
arguments that are relevant to the issues of the question. 


There is a balanced and wide ranging consideration of relevant 
issues, using coherent and logical chains of reasoning that 
shows a full awareness. 


Carefully considers the various elements of the question and 
links arguments to the given scenario. 


Question | Indicative content 
Number 
4a Answers will be credited according to the learner’s demonstration of 


knowledge and understanding of the material, using the indicative content and 
level descriptors below. The indicative content that follows is not prescriptive. 
Answers may cover some/all of the indicative content but learners should be 
rewarded for other relevant answers. 


Learners evaluate the impact on IDC and its staff of a move to a cloud-based 
storage system. 


e No need to pay for technical staff, either in-house or on a consultancy 
basis, to provide a backup system this will be done automatically. 

e Storage capacity can be scaled up and down to fit the needs of the 
business. This has the added benefit of being better for the 
environment than running a server with excess capacity. 

e Will give IDC robust disaster recovery, which would otherwise be 
unlikely due to lack of finance and expertise. 

e Reduces the implications/security risks of lost or stolen laptops and 
other mobile devices. Data stored on the cloud is automatically backed 
up and therefore instantly retrievable. 

e Improved security arises from the reduction in the need to send files 
via external methods such as email. 


Benefits to staff. 
e Because the system can be used anywhere with an internet 


connection, staff will be able to access the files/folders when they are 
out of the office or working in regional offices. 

e Many suppliers provide mobile apps that will allow staff to access data 
on a range of devices. 

e Some staff, e.g. office staff, may be able to take advantage of the 
system and work from home. 

e Because all files are stored centrally everyone sees the latest/same 
version leading to improved collaboration. Reducing the problems of 
conflicting file content, formats and titles. 


Disadvantages 
e Must have an internet connection, could be a disadvantage to staff out 


of the office. 
e Introducing a third party may have security implications for IDC. 
e Training of staff 
e Impact of downtime 


Mark scheme (award up to 10 marks) refer to the guidance on the cover of this 
document for how to apply levels-based mark schemes*. 


Mark | Descriptor 


0 No rewardable material. 


ned Technical vocabulary is used but it is not used appropriately to 


support arguments, in relation to the issues of the question. 
Issues are identified but chains of reasoning are not made, leading 
to a superficial understanding. 


Does not link arguments to the given scenario. 


Accurate technical vocabulary is used to support arguments but not all 
arguments are relevant to the issues of the question. 


There is consideration of relevant issues using logical chains of 
reasoning. 


Considers the various elements of the question and but does not always link 
arguments to the given scenario. 


Fluent and accurate technical vocabulary is used to support arguments 
that are relevant to the issues of the question. 


There is a balanced and wide ranging consideration of relevant issues, 
using coherent and logical chains of reasoning, that shows a full 
awareness. 


Carefully considers the various elements of the question and links 
arguments to the given scenario. 


Question | Indicative content 
Number 


4b Answers will be credited according to the learner’s demonstration of 
knowledge and understanding of the material, using the indicative content 
and level descriptors below. The indicative content that follows is not 
prescriptive. Answers may cover some/all of the indicative content but 
learners should be rewarded for other relevant answers. 


Learners evaluate the decision to allow employees to access the company 
network using personal mobile devices 

Benefits 

e improved employee job satisfaction 


e increased job efficiency and flexibility, may be able to work from 
home, be more productive when meeting clients or traveling to 
work 

e company cost savings for initial device purchase/ongoing usage/IT 
helpdesk support as employees invest in their own devices 

e staff will be used to the devices reducing the need for training 
staff may be able to use ‘cloud’ technologies to share data (this 
may cause issues with the functionality of the task) 


Disadvantages 
e may have an additional cost to add secure wireless functionality to 


the current network 

e company has less control over the devices compared to a device 
owned by the company 

e must ensure they meet their Data Protection obligations to access 
company information 

e may be introducing increased vulnerabilities into what should be a 
secure environment 

e increase in policies and security implementations, would increase 
technical/administration staff workload 

e files and software may not be compatible with both the mobile and 
desktop/laptop operating systems 

e may lead to increased monitoring of employees, e.g. recording the 
geo-location of the personal devices or monitoring the internet 
traffic on the personal devices 


Security 
e WiFi is considered less secure than an Ethernet network, because 


the signal can be detected by anybody in range. 

e mobile devices containing work/sensitive data may get lost or 
stolen more easily than desktops. 

e exposed to wider threat of viruses, etc. when accessing different 
networks 

e reliance on employees to secure devices (which also relies on 
OEM security) 

e there are ways to secure devices, e.g. encryption of drives on mobile 
devices, using VPN to ensure a secure connection to the work server 
and/or implementing policies to ensure workers limit their exposure 
to open networks 

e the use of a sandbox (a security mechanism for separating running 


programs) 

e ring-fencing of data, such as by keeping data contained within a 
specific app 

e procedures must be established for loss/theft of a digital device, e.g. 
how the data on it is kept confidential and retained via a backup 
facility 

Employee responsibilities 

Employee must: 

e ensure that work data will not be merged with personal data 

e that non-employees, such as family members who use the device, 
do not access work data 

e only process corporate personal data for corporate purposes 

e take adequate care to minimise the loss/theft of the devices 


A BYOD business policy should be established following UK Information 
Commissioner's Office (ICO) guidelines including: 


e compliance with the Data Protection Act 1998 (losing employee or 
client data could result in a breach of the act, leaving the company 
vulnerable to legal claims or a fine imposed by the ICO) 

e establishing employee responsibilities 

e establishing which type of corporate data can be processed on 
personal devices 

e how to encrypt and secure access to the corporate data 
how the corporate data should be stored on the personal devices 

e how and when the corporate data should be deleted from the 
personal devices 

e how the data should be transferred from the personal device to the 
company servers 


Mark scheme (award up to 12 marks) refer to the guidance on the cover of this 
document for how to apply levels-based mark schemes*. 


Mark | Descriptor 


7 No rewardable material. 


ne Technical vocabulary is used but it is not used appropriately to support 


arguments, in relation to the issues of the question. 


Issues are identified but chains of reasoning are not made leading to 
a superficial understanding of issues to the scenario. 


No conclusion is presented or is generic. 


5-8 Accurate technical vocabulary is used to support arguments, but not all 
are relevant to the issues of the question. 


There is consideration of relevant issues using logical chains of 
reasoning but does not reflect upon their relative importance to the 
given scenario. 


An attempt at a conclusion is presented that links arguments to the 
given scenario but is not justified in that it does not reflect the careful 
consideration of both sides of the argument. 


Fluent and accurate technical vocabulary is used to support arguments 
that are relevant to the issues of the question. 


There is a balanced and wide ranging consideration of relevant issues 
using coherent and logical chains of reasoning that shows a full 
awareness of their relative importance to the given scenario 


A fully justified conclusion is presented that links arguments to the 
given scenario and that reflects the careful consideration of both sides 
of the argument leading to a reasoned decision. 
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